Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-19667

report_outline: Course activity reports / activity report paticipant - Privacy issue

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      1. Create a course
      2. Create a new user and enrol to the course as a student
      3. Create a new user and enrol to the course as teacher
      4. Login as the teacher and see the student profile in the course context (navigate to page like user/view.php?id=3&course=2)
      5. Make sure that the teacher can see Outline report link in the Reports section
      6. Make sure that the teacher can click the link and see Outline report.
      7. Login as admin and remove "report/outline:viewuserreport" from teacher role.
      8. Login as the teacher again.
      9. Make sure that the teacher can not see Outline report link in the Reports section
      10. Make sure that the teacher see permission denied error when navigate to the user outline report link (like /report/outline/user.php?id=3&course=2&mode=outline)
      Show
      Create a course Create a new user and enrol to the course as a student Create a new user and enrol to the course as teacher Login as the teacher and see the student profile in the course context (navigate to page like user/view.php?id=3&course=2) Make sure that the teacher can see Outline report link in the Reports section Make sure that the teacher can click the link and see Outline report. Login as admin and remove "report/outline:viewuserreport" from teacher role. Login as the teacher again. Make sure that the teacher can not see Outline report link in the Reports section Make sure that the teacher see permission denied error when navigate to the user outline report link (like /report/outline/user.php?id=3&course=2&mode=outline)
    • Difficulty:
      Easy
    • Affected Branches:
      MOODLE_19_STABLE, MOODLE_26_STABLE, MOODLE_27_STABLE, MOODLE_32_STABLE, MOODLE_33_STABLE, MOODLE_34_STABLE
    • Fixed Branches:
      MOODLE_35_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-19667-master-viewuserreport

      Description

      Since m1.9.4 the two capabilities: "coursereport/outline:view" and "site:viewreports" in combination with the switch "show activity reports" within the courses administration menu control wether the courses activity reports / logs are show to the teacher and participant - wich works so far. But for the privacy reasons of our institution we are only allowed to show the teacher the courses overall activity report (course > administration > activity reports) and not the personal ones accessible via: "course > participants > user > activity report" - wich unfortunately isn't cought by this approach. And in the second place we dont't think the user has any benefit of "Today's logs" and "All logs", so we hide those too.

      To summarize:
      1. course > administration > activity reports (the summary) // ok for teacher (and admin)
      2. course > participants > user > activity report > [Outline report | Complete report | Grade] // ok for user (and admin)
      3. course > participants > user > activity report > [Outline report | Complete report | Today's logs | All logs | Grade] // ok for admin

       

      The fix will be sponsored by Alexander Bias and Ulm Uni. Catalyst to carry out the work.

        Attachments

        1. Course-outline-I.jpg
          Course-outline-I.jpg
          40 kB
        2. Course-Outline-II.jpg
          Course-Outline-II.jpg
          39 kB
        3. Course-Settings.png
          Course-Settings.png
          12 kB
        4. Step 10-Confirmed.PNG
          Step 10-Confirmed.PNG
          32 kB
        5. Step 5 - Confirmed.PNG
          Step 5 - Confirmed.PNG
          95 kB
        6. Step 6 - Confirmed.PNG
          Step 6 - Confirmed.PNG
          67 kB
        7. Step9-Confirmed.PNG
          Step9-Confirmed.PNG
          97 kB

          Activity

            People

            Assignee:
            dmitriim Dmitrii Metelkin
            Reporter:
            mlzjens Jens Eremie
            Peer reviewer:
            Adrian Greeve Adrian Greeve
            Integrator:
            Andrew Lyons Andrew Lyons
            Tester:
            Gladys Basiana Gladys Basiana
            Participants:
            Component watchers:
            Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias, Sujith Haridasan
            Votes:
            5 Vote for this issue
            Watchers:
            8 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              17/May/18